Application Security Engineer

Job Summary

A company is looking for an Application Security Engineer to work remotely.

Key Responsibilities

• Triage and validate customer-reported security vulnerabilities across web, API, and server-side attack surfaces
• Reproduce reported issues in lab environments and assess exploitability, risk, and remediation paths
• Prepare clear, customer-facing security assessments for both technical and executive audiences

Required Qualifications

• 3+ years of experience in application security, penetration testing, bug bounty programs, or product security engineering
• Strong knowledge of OWASP Top 10 vulnerabilities
• Hands-on experience with ACLs, scripted REST APIs, and data access patterns
• Ability to analyze and trace JavaScript and Java code